PkgRadar

PyPI · pypi.org

browser-use-volcengine

Py Install Time Subprocess: subprocess call — process spawning.

Why PkgRadar flagged 0.12.6

SeveritySignalEvidence
mediumPy Install Time Subprocesssubprocess call — process spawning. · browser_use_volcengine-0.12.6/browser_use/skill_cli/commands/setup.py
highPy Runtime Dynamic Dangerous ImportDynamic __import__('os') — reflection bypass for static checks. · browser_use_volcengine-0.12.6/browser_use/skill_cli/python_session.py

Scanned versions

VersionVerdictScoreScanned (UTC)
0.12.6High risk852026-06-01

Block this in CI

PkgRadar gates browser-use-volcengine (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi browser-use-volcengine==0.12.6